CrowdSec vs TNSR
CrowdSec
crowdsec.netTNSR
netgate.comSide by side
| Figure | CrowdSec | TNSR |
|---|---|---|
| Price from | $49/mo | $83.25/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | Yes | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| iOS | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 8 | 3 |
| Spec score · Firewall Software | 9.2 (#3) | 8.7 (#11) |
| Documentation depth | The documentation includes installation guides, architecture, data sources, remediation, APIs, integrations, compilation and contribution/testing guidance. | Netgate publishes installation, platform, command, API, recipe, troubleshooting, security and release documentation for TNSR. |
| Founded | 2020 | 2004 |
| Free plan | Yes | No |
| Headquarters | Montrouge, France | Austin, Texas, United States |
| Notable release | CrowdSec 1.8.0, released August 31, 2026, added WAF bot detection, a dedicated Kubernetes datasource, HTTP helpers and LAPI performance improvements, while fixing two denial-of-service vulnerabilities. | Netgate published TNSR 26.02 release notes describing new VPF high-availability heartbeat synchronization, routing fixes and dataplane updates. |
| Praise: Gartner reviewer | The published Gartner review praises lightweight real-time log analysis, crowd-powered reputation, smooth Linux deployment and stable firewall integration. | The sole Gartner review is marked favorable and describes creating networks with advanced capabilities. |
| Rating on Gartner Peer Insights | 5.0 out of 5 from 1 rating. | 5.0 out of 5 from 1 reviews |
| Security controls | The privacy policy states that employee access requires multi-factor authentication and that automated data encryption is implemented where possible. | TNSR supports password or key authentication, RADIUS and NACM role-based access control. |
| Support | CrowdSec Console Premium lists optional premium service and support for $1K/month. | Netgate says TNSR subscriptions include 24x7 TAC support, and its overview describes access to support veterans, professional services, and training. |
| What it does | CrowdSec Security Engine analyzes logs and HTTP requests with behavior-based scenarios, then uses remediation components to block malicious activity. | TNSR is a high-performance software router and VPN concentrator for enterprise, service-provider and government networks. |
Plans
CrowdSec
- IP Reputation API$49 a month
- Platinum Blocklists$1,900 a month
- Live Exploit Tracker$2,000 a month
- CommunityFree
- Community Security EngineFree
- IP Reputation API access$49 a month
- Local CTI replication$9,000 a month
- CrowdSec Console PremiumPriced on request
TNSR
- TNSR AWS/Azure proof of conceptFree
- TNSR Software Subscription - Renewal$999 a year
- TNSR softwarePrice not published
In their own words
CrowdSec
CrowdSec is an open-source security stack designed to detect and block malicious IP addresses to protect infrastructure and applications. Its Security Engine analyzes logs and requests for harmful behavior, while the Remediation Component blocks IPs identified by that engine across supported platforms. CrowdSec says analysis takes place locally and logs do not leave the user's infrastructure. Its AppSec Component can provide web application firewall protection. The free Community offering includes real-time decision management, audit support, AWS CloudTrail scenarios, CAPI allow lists, and Kubernetes audit acquisition. IP Reputation data includes contextual criteria, activity timelines, autonomous system and IP range reputation, MITRE technique classification, and hourly updates. Listed integrations include Microsoft Sentinel, AWS log sources, WordPress, Cloudflare, Docker, and Kubernetes. The Community Security Engine is free. The IP Reputation API is listed at $49 a month for 5,000 queries; other listed services include blocklists and threat-intelligence options. CrowdSec lists Linux, macOS, and Windows among its platforms, with API, extension, self-hosted, and web options.
TNSR
TNSR is a software router and VPN concentrator for high-speed routing and VPN workloads. Netgate says its Vector Packet Processing can scale from 1 to 1000 Gbps and beyond on commercial off-the-shelf hardware. Routing options include BGP, OSPF, static and dynamic routing, policy-based routing, carrier-grade NAT, and equal-cost multipath. For VPNs, it supports routed site-to-site IPsec and WireGuard, with IKEv1 and IKEv2. Administrators can manage TNSR through a CLI, RESTCONF API, or NETCONF. Monitoring options include SNMP and a Prometheus exporter for dataplane statistics. Security features listed include access control lists, packet filtering, password or key authentication, RADIUS, and role-based access control. Netgate offers cloud deployments through AWS and Azure marketplaces, as well as its 6100, 8200, and 8300 appliance systems. Subscriptions include 24x7 TAC support. TNSR has firewall capabilities, but Netgate does not position it as a firewall and warns it may lack features customers expect from pfSense Plus.